mirrors
/
FreeRDP
mirror of https://github.com/FreeRDP/FreeRDP
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[tools] improve smartcard traffic interpreter 

This patch adds interpretations for more commands and adds a new application.
This commit is contained in:
David Fort 2024-06-18 15:38:17 +02:00
parent a2a0cc0792
commit 7bf8669e6d
1 changed files with 213 additions and 59 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

272
tools/smartcard-interpreter.py
View File

@ -69,6 +69,7 @@ AIDs = {
"a00000039742544659": "MsGidsAID", "a00000039742544659": "MsGidsAID",
"a000000308": "PIV", "a000000308": "PIV",
"a0000003974349445f0100": "SC PNP", "a0000003974349445f0100": "SC PNP",
"a0000001510000": "GPC",
} }
FIDs = { FIDs = {
@ -89,7 +90,9 @@ DOs = {
ERROR_CODES = { ERROR_CODES = {
0x9000: "success", 0x9000: "success",
0x6100: "more bytes",
0x6282: "end of file or record", 0x6282: "end of file or record",
0x6283: "card locked",
0x63C0: "warning counter 0", 0x63C0: "warning counter 0",
0x63C1: "warning counter 1", 0x63C1: "warning counter 1",
0x63C2: "warning counter 2", 0x63C2: "warning counter 2",
@ -101,6 +104,7 @@ ERROR_CODES = {
0x63C8: "warning counter 8", 0x63C8: "warning counter 8",
0x63C9: "warning counter 9", 0x63C9: "warning counter 9",
0x6982: "security status not satisfied", 0x6982: "security status not satisfied",
0x6882: "Secure messaging not supported",
0x6985: "condition of use not satisfied", 0x6985: "condition of use not satisfied",
0x6A80: "incorrect parameter cmd data field", 0x6A80: "incorrect parameter cmd data field",
0x6A81: "function not suppported", 0x6A81: "function not suppported",
@ -126,56 +130,124 @@ PIV_OIDs = {
} }
class ApplicationDummy(object): class ApplicationDummy(object):
"""Base application"""
def __init__(self, aid): def __init__(self, aid):
self.aid = aid self.aid = aid
def getAID(self): def getAID(self):
return self.aid return self.aid
def selectResult(self, fci, status, body): def selectResult(self, fci, status, body):
return 'selectResult(%s, %s, %s)\n' %(fci, status, body.hex()) return 'selectResult(fci=%s, status=0x%x) = %s\n' %(fci, status, body.hex())
def getData(self, fileId, bytes): def getData(self, fileId, bytes):
return 'getData(0x%x, %s)\n' %(fileId, bytes.hex()) return 'getData(status=0x%x) = %s\n' %(fileId, bytes.hex())
def getDataResult(self, status, body): def getDataResult(self, status, body):
return 'getDataResult(0x%x, %s)\n' %(status, body.hex()) return 'getDataResult(status=0x%x) = %s\n' %(status, body.hex())
def mse(self, body): def mse(self, body):
return body.hex() return body.hex()
def mseResult(self, status, body): def mseResult(self, status, body):
return body.hex() return body.hex()
def pso(self, body): def pso(self, body):
return body.hex() return body.hex()
def psoResult(self, status, body): def psoResult(self, status, body):
return body.hex() return body.hex()
def getResponse(self, status, body):
return body.hex()
def getResponseResult(self, status, body):
return body.hex()
def verify(self, status, body):
return "verify(%s)" % body.hex()
def verifyResult(self, status, body):
return "verify(%s)" % body.hex()
'''
'''
class ApplicationGpc(object):
"""GlobalPlatform application"""
def __init__(self, aid):
self.aid = aid
self.lastGetData = None
def getAID(self):
return self.aid
def selectResult(self, fci, status, body):
return 'selectResult(fci=%s, status=0x%x) = %s\n' %(fci, status, body.hex())
def getData(self, fileId, bytes):
tags = {
0x42: 'Issuer Identification Number',
0x45: 'Card Image Number',
0x66: 'Card Data',
0x67: 'Card Capability Information' # ???
}
self.lastGetData = fileId
return 'getData(%s)\n' % tags.get(fileId, '<unknown 0x%x>' % fileId)
def getDataResult(self, status, body):
if self.lastGetData == 0x66:
# Card Data
pass
return 'getDataResult(0x%x) = %s\n' %(status, body.hex())
def mse(self, body):
return body.hex()
def mseResult(self, status, body):
return body.hex()
def pso(self, body):
return body.hex()
def psoResult(self, status, body):
return body.hex()
def getResponse(self, status, body):
return body.hex()
def getResponseResult(self, status, body):
return body.hex()
class ApplicationPIV(object): class ApplicationPIV(object):
"""PIV application"""
def __init__(self, aid): def __init__(self, aid):
self.lastGet = None self.lastGet = None
self.aid = aid self.aid = aid
def getAID(self): def getAID(self):
return self.aid return self.aid
def selectResult(self, selectT, status, body): def selectResult(self, selectT, status, body):
ret = '' ret = ''
appTag = body[0] appTag = body[0]
appLen = body[1] appLen = body[1]
body = body[2:2+appLen] body = body[2:2+appLen]
while len(body) > 2: while len(body) > 2:
tag = body[0] tag = body[0]
tagLen = body[1] tagLen = body[1]
if tagLen != 1:
pass
if selectT == "FCI": if selectT == "FCI":
if tag == 0x4f: if tag == 0x4f:
ret += "\tpiv version: %s\n" % body[2:2 + tagLen].hex() ret += "\tpiv version: %s\n" % body[2:2 + tagLen].hex()
elif tag == 0x79: elif tag == 0x79:
subBody = body[2:2 + tagLen] subBody = body[2:2 + tagLen]
subTag = subBody[0] subTag = subBody[0]
subLen = subBody[1] subLen = subBody[1]
@ -184,13 +256,13 @@ class ApplicationPIV(object):
if subTag == 0x4f: if subTag == 0x4f:
v = content[4:] v = content[4:]
if v.startswith('a000000308'): if v.startswith('a000000308'):
content = 'NIST RID' content = 'NIST RID'
ret += '\tCoexistent tag allocation authority: %s\n' % content ret += '\tCoexistent tag allocation authority: %s\n' % content
elif tag == 0x50: elif tag == 0x50:
ret += '\tapplication label\n' ret += '\tapplication label: %s\n' % body[2:2+tagLen].decode('utf8')
elif tag == 0xac: elif tag == 0xac:
ret += '\tCryptographic algorithms supported\n' ret += '\tCryptographic algorithms supported: %s\n' % body[2:2+tagLen].hex()
else: else:
rety += '\tunknown tag 0x%x\n' % tag rety += '\tunknown tag 0x%x\n' % tag
@ -200,9 +272,12 @@ class ApplicationPIV(object):
body = body[2+tagLen:] body = body[2+tagLen:]
return ret return ret
def getData(self, fileId, bytes): def getData(self, fileId, bytes):
ret = "\tfileId=%s\n" % FIDs.get(fileId, "%0.4x" % fileId) ret = "\tfileId=%s(%0.4x)\n" % (FIDs.get(fileId, ""), fileId)
if len(bytes) < 7:
return ret + "\t/!\\ too short !!!!"
lc = bytes[4] lc = bytes[4]
tag = bytes[5] tag = bytes[5]
@ -210,7 +285,7 @@ class ApplicationPIV(object):
if lc == 4: if lc == 4:
ret += "\tdoId=%0.4x\n"% (bytes[7] * 256 + bytes[8]) ret += "\tdoId=%0.4x\n"% (bytes[7] * 256 + bytes[8])
elif lc == 0xa: elif lc == 0xa:
keyStr = '' keyStr = ''
# TLV # TLV
@ -224,16 +299,20 @@ class ApplicationPIV(object):
tag = bytes[i] tag = bytes[i]
tagLen = bytes[i+1] tagLen = bytes[i+1]
keyStr += "value(tag=0x%x len=%d)" keyStr += "value(tag=0x%x len=%d)"
elif lc == 3:
ret += "\tDiscovery Object\n"
elif lc == 4:
ret += "\tBiometric Information Templates (BIT) Group Template\n"
elif lc == 5: elif lc == 5:
if tag == 0x5C: if tag == 0x5C:
tagStr = bytes[7:].hex() tagStr = bytes[7:10].hex()
ret += '\ttag: %s(%s)\n' % (tagStr, PIV_OIDs.get(tagStr, '<unknown>')) ret += '\ttag: %s(%s)\n' % (tagStr, PIV_OIDs.get(tagStr, '<unknown>'))
self.lastGet = tagStr self.lastGet = tagStr
else: else:
ret += "\tunknown key access\n" ret += "\tunknown key access(lc=0x%x)\n" % lc
return ret return ret
def getDataResult(self, status, body): def getDataResult(self, status, body):
ret = '' ret = ''
if not len(body): if not len(body):
@ -246,7 +325,7 @@ class ApplicationPIV(object):
tag = body[0] tag = body[0]
tagLen = body[1] tagLen = body[1]
tagBody = body[2:2+tagLen] tagBody = body[2:2+tagLen]
if self.lastGet in ('5fc102',): if self.lastGet in ('5fc102',):
# Card holder Unique Identifier # Card holder Unique Identifier
if tag == 0x30: if tag == 0x30:
@ -259,32 +338,78 @@ class ApplicationPIV(object):
ret += '\tIssuer Asymmetric Signature: %s\n' % tagBody.hex() ret += '\tIssuer Asymmetric Signature: %s\n' % tagBody.hex()
else: else:
ret += "\tunknown tag=0x%x len=%d content=%s\n" % (tag, tagLen, tagBody.hex()) ret += "\tunknown tag=0x%x len=%d content=%s\n" % (tag, tagLen, tagBody.hex())
elif self.lastGet in ('5fc107',):
# Card Capability Container
capas = {
0xf0: "Card Identifier",
0xf1: "Capability Container version number",
0xf2: "Capability Grammar version number",
0xf3: "Applications CardURL",
0xf4: "PKCS#15",
0xf5: "Registered Data Model number",
0xf6: "Access Control Rule Table",
0xf7: "Card APDUs",
0xfa: "Redirection Tag",
0xfb: "Capability Tuples (CTs)",
0xfc: "Status Tuples (STs)",
0xfd: "Next CCC",
0xe3: "Extended Application CardURL",
0xb4: "Security Object Buffer",
0xfe: "Error Detection Code"
}
if tag in capas.keys():
if tagLen:
ret += "\t%s: len=%d %s\n" % (capas[tag], tagLen, tagBody.hex())
else:
ret += "\tunknown capa tag 0x%x: %s\n" % (tag, tagBody.hex())
elif self.lastGet == '5fc105':
# X.509 Certificate for PIV Authentication
pass
else: else:
ret += "\t%s: unknown tag=0x%x len=%d content=%s\n" % (self.lastGet, tag, tagLen, tagBody.hex()) ret += "\t%s: unimplemented tag=0x%x len=%d content=%s\n" % (self.lastGet, tag, tagLen, tagBody.hex())
body = body[2+tagLen:] body = body[2+tagLen:]
return ret return ret
def getResponse(self, status, body):
return body.hex()
def getResponseResult(self, status, body):
return body.hex()
def mse(self, body): def mse(self, body):
return body.hex() return body.hex()
def mseResult(self, status, body): def mseResult(self, status, body):
return body.hex() return body.hex()
def pso(self, body): def pso(self, body):
return body.hex() return body.hex()
def psoResult(self, status, body): def psoResult(self, status, body):
return body.hex() return body.hex()
def verify(self, status, body):
return "verify(%s)" % body.hex()
def verifyResult(self, status, body):
return "verify(%s)" % body.hex()
class ApplicationGids(object): class ApplicationGids(object):
"""GIDS application"""
def __init__(self, aid): def __init__(self, aid):
self.aid = aid self.aid = aid
self.lastDo = None self.lastDo = None
def getAID(self): def getAID(self):
return self.aid return self.aid
@ -292,9 +417,9 @@ class ApplicationGids(object):
ret = '' ret = ''
tag = bytes[0] tag = bytes[0]
tagLen = bytes[1] tagLen = bytes[1]
body = bytes[2:2+tagLen] body = bytes[2:2+tagLen]
if tag == 0x62: if tag == 0x62:
ret += '\tFCP\n' ret += '\tFCP\n'
@ -302,7 +427,7 @@ class ApplicationGids(object):
tag2 = body[0] tag2 = body[0]
tag2Len = body[1] tag2Len = body[1]
tag2Body = body[2:2+tag2Len] tag2Body = body[2:2+tag2Len]
if tag2 == 0x82: if tag2 == 0x82:
ret += '\t\tFileDescriptor: %s\n' % tag2Body.hex() ret += '\t\tFileDescriptor: %s\n' % tag2Body.hex()
elif tag2 == 0x8a: elif tag2 == 0x8a:
@ -313,39 +438,39 @@ class ApplicationGids(object):
ret += '\t\tSecurityAttributes: %s\n' % tag2Body.hex() ret += '\t\tSecurityAttributes: %s\n' % tag2Body.hex()
else: else:
ret += '\t\tunhandled tag=0x%x body=%s\n' % (tag2, tag2Body.hex()) ret += '\t\tunhandled tag=0x%x body=%s\n' % (tag2, tag2Body.hex())
body = body[2+tag2Len:] body = body[2+tag2Len:]
return ret return ret
def parseFci(self, bytes): def parseFci(self, bytes):
ret = '' ret = ''
tag = bytes[0] tag = bytes[0]
tagLen = bytes[1] tagLen = bytes[1]
body = bytes[2:2+tagLen] body = bytes[2:2+tagLen]
if tag == 0x61: if tag == 0x61:
ret += '\tFCI\n' ret += '\tFCI\n'
while len(body) > 2: while len(body) > 2:
tag2 = body[0] tag2 = body[0]
tag2Len = body[1] tag2Len = body[1]
tag2Body = body[2:2+tag2Len] tag2Body = body[2:2+tag2Len]
if tag2 == 0x4F: if tag2 == 0x4F:
ret += '\t\tApplication AID: %s\n' % tag2Body.hex() ret += '\t\tApplication AID: %s\n' % tag2Body.hex()
elif tag2 == 0x50: elif tag2 == 0x50:
ret += '\t\tApplication label: %s\n' % tag2Body.encode('utf8') ret += '\t\tApplication label: %s\n' % tag2Body.encode('utf8')
elif tag2 == 0x73: elif tag2 == 0x73:
body2 = tag2Body body2 = tag2Body
tokens = [] tokens = []
while len(body2) > 2: while len(body2) > 2:
tag3 = body2[0] tag3 = body2[0]
tag3Len = body2[1] tag3Len = body2[1]
if tag3 == 0x40: if tag3 == 0x40:
v = body2[2] v = body2[2]
if v & 0x80: if v & 0x80:
@ -355,29 +480,29 @@ class ApplicationGids(object):
if v & 0x20: if v & 0x20:
tokens.append('keyEstabIntAuthECC') tokens.append('keyEstabIntAuthECC')
body2 = body2[2+tag3Len:] body2 = body2[2+tag3Len:]
ret += '\t\tDiscretionary data objects: %s\n' % ",".join(tokens) ret += '\t\tDiscretionary data objects: %s\n' % ",".join(tokens)
else: else:
ret += '\t\tunhandled tag=0x%x body=%s\n' % (tag2, tag2Body.hex()) ret += '\t\tunhandled tag=0x%x body=%s\n' % (tag2, tag2Body.hex())
body = body[2+tag2Len:] body = body[2+tag2Len:]
return ret return ret
def selectResult(self, selectT, status, body): def selectResult(self, selectT, status, body):
if not len(body): if not len(body):
return '' return ''
if selectT == 'FCP': if selectT == 'FCP':
return self.parseFcp(body) return self.parseFcp(body)
elif selectT == 'FCI': elif selectT == 'FCI':
return self.parseFci(body) return self.parseFci(body)
else: else:
return '\tselectResult(%s, %s, %s)\n' % (selectT, status, body.hex()) return '\tselectResult(fci=%s, status=0x%x) = %s\n' % (selectT, status, body.hex())
def getData(self, fileId, bytes): def getData(self, fileId, bytes):
lc = bytes[4] lc = bytes[4]
tag = bytes[5] tag = bytes[5]
@ -391,7 +516,7 @@ class ApplicationGids(object):
ret = '\tunknown tag=0%x len=%d v=%s' % (tag, tagLen, bytes[7:7+tagLen].hex()) ret = '\tunknown tag=0%x len=%d v=%s' % (tag, tagLen, bytes[7:7+tagLen].hex())
return ret return ret
def getDataResult(self, status, body): def getDataResult(self, status, body):
ret = '' ret = ''
''' '''
@ -404,13 +529,19 @@ class ApplicationGids(object):
body = body[2+tagLen:] body = body[2+tagLen:]
''' '''
return ret return ret
def mse(self, body): def mse(self, body):
return body.hex() return body.hex()
def mseResult(self, status, body): def mseResult(self, status, body):
return body.hex() return body.hex()
def getResponse(self, status, body):
return body.hex()
def getResponseResult(self, status, body):
return body.hex()
def pso(self, body): def pso(self, body):
return body.hex() return body.hex()
@ -420,15 +551,24 @@ class ApplicationGids(object):
def createAppByAid(aid): def createAppByAid(aid):
if aid == "a000000308": if aid in ("a000000308", 'a00000030800001000',):
return ApplicationPIV(aid) return ApplicationPIV(aid)
elif aid in ('a00000039742544659',): elif aid in ('a00000039742544659',):
return ApplicationGids(aid) return ApplicationGids(aid)
elif aid in ('a0000001510000',):
return ApplicationGpc(aid)
return ApplicationDummy(aid) return ApplicationDummy(aid)
def getErrorCode(status):
if status & 0x6100:
return "%d more bytes" % (status & 0xff)
return ERROR_CODES.get(status, "<unknown>")
if __name__ == '__main__': if __name__ == '__main__':
if len(sys.argv) > 1: if len(sys.argv) > 1:
fin = open(sys.argv[1], "r") fin = open(sys.argv[1], "r")
@ -497,7 +637,7 @@ if __name__ == '__main__':
elif p1 == 0x4: elif p1 == 0x4:
aid = bytes[i:i+lc].hex() aid = bytes[i:i+lc].hex()
lastSelect = AIDs.get(aid, '') lastSelect = AIDs.get(aid, '<unknown %s>' % aid)
print("\tselectByAID: %s(%s)" % (aid, lastSelect)) print("\tselectByAID: %s(%s)" % (aid, lastSelect))
if p2 == 0x00: if p2 == 0x00:
@ -536,7 +676,14 @@ if __name__ == '__main__':
ret = currentApp.getData(fileId, bytes) ret = currentApp.getData(fileId, bytes)
print("%s" % ret) print("%s" % ret)
elif cmdName == "GET RESPONSE":
#lc = bytes[4]
#fileId = p1 * 256 + p2
#ret = currentApp.getResponse(fileId, bytes)
#print("%s" % ret)
pass
elif cmdName == "MSE": elif cmdName == "MSE":
ret = currentApp.mse(bytes[5:5+lc]) ret = currentApp.mse(bytes[5:5+lc])
print("%s" % ret) print("%s" % ret)
@ -551,13 +698,16 @@ if __name__ == '__main__':
else: else:
# Responses # Responses
if not len(bytes):
continue
status = bytes[-1] + bytes[-2] * 256 status = bytes[-1] + bytes[-2] * 256
body = bytes[0:-2] body = bytes[0:-2]
print("status=0x%0.4x(%s)" % (status, ERROR_CODES.get(status, "<unknown>"))) print("status=0x%0.4x(%s)" % (status, getErrorCode(status)))
if not len(body): if not len(body):
continue continue
ret = '' ret = ''
if lastCmd == "SELECT": if lastCmd == "SELECT":
ret = currentApp.selectResult(lastSelectT, status, body) ret = currentApp.selectResult(lastSelectT, status, body)
@ -567,6 +717,10 @@ if __name__ == '__main__':
ret = currentApp.mseResult(status, body) ret = currentApp.mseResult(status, body)
elif lastCmd == "PSO": elif lastCmd == "PSO":
ret = currentApp.psoResult(status, body) ret = currentApp.psoResult(status, body)
elif lastCmd == "GET RESPONSE":
ret = currentApp.getResponseResult(status, body)
elif lastCmd == "VERIFY":
ret = currentApp.verifyResult(status, body)
if ret: if ret:
print("%s" % ret) print("%s" % ret)